Release date:
2026-08-13 04:11:53 UTC
Description:
* CVE-2026-9672: three defects in the GIF LZW decoder of the bundled libgd -
the code-table reset loop wrote sd->table[1][0] instead of sd->table[1][i]
so most of table[1] kept stale data, LWZReadByte_() kept decoding past the
end-of-information code when the trailing data blocks drained cleanly, and
ReadImage() left its LZW_STATIC_DATA uninitialised on the stack
* CVE-2026-17543: SQL injection in ext/pgsql - php_pgsql_add_quotes() wrapped
values in an E'...' literal, in which the backslash left unescaped by
PQescapeStringConn() (the default standard_conforming_strings=on doubles
only the quote) escapes the following quote and lets a payload break out;
pg_convert(), pg_insert(), pg_update(), pg_delete() and pg_select() are
affected. Now quoted with a plain '...' literal
* CVE-2026-7260: unbounded recursion in phar_get_link_source() when a
tar-based phar archive contains a circular symlink chain; resolution is now
an iterative walk with Floyd cycle detection, returning NULL on a cycle
Updated packages:
-
alt-php70_7.0.33-140_amd64.deb
sha:eb9b52125d20bd317e6f8fdaa26ddc5560e06f3e
-
alt-php70-bcmath_7.0.33-140_amd64.deb
sha:6aa8553a0ed13f1d29e2925f766ca8056bee535a
-
alt-php70-cli_7.0.33-140_amd64.deb
sha:58ba84c0b93cb2026d9e9c8b436dd858818e7d43
-
alt-php70-common_7.0.33-140_amd64.deb
sha:4dcef97c81fe7abbbe8e79fa2653c797536ead38
-
alt-php70-dba_7.0.33-140_amd64.deb
sha:ff76b0874cab7c99d4ad907d636fe2f696c5cc2b
-
alt-php70-dev_7.0.33-140_amd64.deb
sha:9f8077e65058825b12132f37c70b4a2f15be1dc6
-
alt-php70-enchant_7.0.33-140_amd64.deb
sha:77e784ea5478b8ff6ec5e32fea7cc9a436b6afa9
-
alt-php70-firebird_7.0.33-140_amd64.deb
sha:65485e8800b6072bbda8fa00b1cffba901d23d39
-
alt-php70-gd_7.0.33-140_amd64.deb
sha:535a7aeeaedb81a9f825f3a8ddac95f16a8f7926
-
alt-php70-imap_7.0.33-140_amd64.deb
sha:d46367b6f9a0ff9c78b6d365304ec0263a5f365b
-
alt-php70-intl_7.0.33-140_amd64.deb
sha:6f6b3ac3b93f23fd82493ba75bfcca564a46c71a
-
alt-php70-ldap_7.0.33-140_amd64.deb
sha:58619301eeecefd013c9a5dd367f18c52a1b28c1
-
alt-php70-mbstring_7.0.33-140_amd64.deb
sha:dae342ca8faef3328a49ee0922bf24efe6aa4b85
-
alt-php70-mcrypt_7.0.33-140_amd64.deb
sha:65a9b872a67716e52bc397d43875a4ea1379fb5f
-
alt-php70-mysqlnd_7.0.33-140_amd64.deb
sha:0c131f70e8c2094ac89ec68b1a4b34c295a311c6
-
alt-php70-odbc_7.0.33-140_amd64.deb
sha:4ccbb92b900e7c8fb1cd67b8803a0a016a64aa1a
-
alt-php70-opcache_7.0.33-140_amd64.deb
sha:fa20bf73d5b0e773146c50de019a7f924a08f575
-
alt-php70-pdo_7.0.33-140_amd64.deb
sha:1b852f41e67956a4a2ab5999d2c83d4b1d715dcc
-
alt-php70-pgsql_7.0.33-140_amd64.deb
sha:a1c477b176cd53fe964b18048a1ced635d27a6c8
-
alt-php70-php-fpm_7.0.33-140_amd64.deb
sha:17d6e599f2b765c70081cd15666e6158fef12fea
-
alt-php70-process_7.0.33-140_amd64.deb
sha:a08b47f57945a56f4d16e97a1c9f81f9c423a35b
-
alt-php70-pspell_7.0.33-140_amd64.deb
sha:8e836120129d3536bac4bf6da1bde9a52ec1c355
-
alt-php70-recode_7.0.33-140_amd64.deb
sha:ee93c72277d6ff0895d2795afad5c7c00ad913e3
-
alt-php70-snmp_7.0.33-140_amd64.deb
sha:c0043a6ab26f1260539b3424cba3e059b5e530ce
-
alt-php70-soap_7.0.33-140_amd64.deb
sha:59d1d1f89d9d14aaec3370e6c9378fd111276d56
-
alt-php70-tidy_7.0.33-140_amd64.deb
sha:a8943d5ff480231afd49e5058810ccc4f4ffcb9a
-
alt-php70-xml_7.0.33-140_amd64.deb
sha:b353bd7f83a1b633276e2d6c7319c8f2938f53d5
-
alt-php70-xmlrpc_7.0.33-140_amd64.deb
sha:4fbdac335177ef7c16a1ae3b37c7798658800ad7
-
alt-php70_7.0.33-140_arm64.deb
sha:46d0b76c6822889e40cf73c4271d955bf39f41f3
-
alt-php70-bcmath_7.0.33-140_arm64.deb
sha:dd51c8da420ba5f84518f8e76e9aa9a376fff1d4
-
alt-php70-cli_7.0.33-140_arm64.deb
sha:e7d2219fb14554531070f258c5af0d358587f411
-
alt-php70-common_7.0.33-140_arm64.deb
sha:764287cbff6c26fdf7670ca4d96cd94e33817397
-
alt-php70-dba_7.0.33-140_arm64.deb
sha:abdeb46124685cbd2bc61f501002dc4f5c28c923
-
alt-php70-dev_7.0.33-140_arm64.deb
sha:cda433bc6d2817a9bf9b8b40fe00b66081718df9
-
alt-php70-enchant_7.0.33-140_arm64.deb
sha:2518d5e785eb8557428c1a4be89e62492395d4cb
-
alt-php70-firebird_7.0.33-140_arm64.deb
sha:bf53148ae00b3e0d44a84ec3ba68fe3115cad33b
-
alt-php70-gd_7.0.33-140_arm64.deb
sha:fe34a9427fa29401ae099d694937b9354a6b2d7e
-
alt-php70-imap_7.0.33-140_arm64.deb
sha:82b2ff09d54efebac0368a3b81b0fb06130f76c7
-
alt-php70-intl_7.0.33-140_arm64.deb
sha:d4dfde09da3cd76e803ef2fd19e16075065f0461
-
alt-php70-ldap_7.0.33-140_arm64.deb
sha:654989791bc2d4274b0a9ac0128b77711e932903
-
alt-php70-mbstring_7.0.33-140_arm64.deb
sha:2a36a423e83c03056f71ab740a0f9dad63ed11ef
-
alt-php70-mcrypt_7.0.33-140_arm64.deb
sha:24a1bbb4f51ac671751e9e10a663f139f0228ad9
-
alt-php70-mysqlnd_7.0.33-140_arm64.deb
sha:390515352f6b42d9412378e6c900413edb405d6b
-
alt-php70-odbc_7.0.33-140_arm64.deb
sha:d6a4ee591be6bf7eef9125f23be2159fbca3fb44
-
alt-php70-opcache_7.0.33-140_arm64.deb
sha:cfa8f0a1dd8ca5d42a62df3d281bdd94cc239666
-
alt-php70-pdo_7.0.33-140_arm64.deb
sha:9bd3f26f8fab91eafdfa50016d43c56c8d412fd1
-
alt-php70-pgsql_7.0.33-140_arm64.deb
sha:ca3b1098bee9858d08a76d81d1245c0317abae57
-
alt-php70-php-fpm_7.0.33-140_arm64.deb
sha:09bdbd064446c6863d5c87ee0d580b83665263cf
-
alt-php70-process_7.0.33-140_arm64.deb
sha:1d7ec93209d49785411a1cd5fa372295f6473b84
-
alt-php70-pspell_7.0.33-140_arm64.deb
sha:2b9230151b9628c7303337614ea380e18fbef78b
-
alt-php70-recode_7.0.33-140_arm64.deb
sha:563a9faaffb390e86059a49997f9c628079d4543
-
alt-php70-snmp_7.0.33-140_arm64.deb
sha:d5703b8477732dca6188754bfa0be75037daafa2
-
alt-php70-soap_7.0.33-140_arm64.deb
sha:716eb0cf4aa5ab32e2ca1ad8f588a01b8be1f2af
-
alt-php70-tidy_7.0.33-140_arm64.deb
sha:a22572071fb9137a6a41733ab92d6b506f91111c
-
alt-php70-xml_7.0.33-140_arm64.deb
sha:4e8514a97874fcec9d65fa81cbc73252a384e16b
-
alt-php70-xmlrpc_7.0.33-140_arm64.deb
sha:7da98a5ef6d728210fed984f7b183431b7c56005
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
